Read brusnika-stage OpenObserve auth from Vault file in otel

This commit is contained in:
Kochetkov S 2026-06-15 14:24:47 +03:00
parent 07aeb166ba
commit ad6e4bbe23

View File

@ -8,26 +8,6 @@ spec:
disableWait: true
upgrade:
disableWait: true
postRenderers:
- kustomize:
patches:
- target:
group: apps
version: v1
kind: DaemonSet
name: otel-collector-agent
patch: |-
- op: replace
path: /spec/template/spec/containers/0/command
value:
- /bin/sh
- -ec
- op: replace
path: /spec/template/spec/containers/0/args
value:
- |
export OPENOBSERVE_BASIC_AUTH="$(cat /vault/secrets/openobserve-basic-auth)"
exec /otelcol-contrib --config=/conf/relay.yaml
dependsOn:
- name: prometheus-stack
namespace: prometheus-stack
@ -47,7 +27,7 @@ spec:
vault.hashicorp.com/agent-inject-secret-openobserve-basic-auth: secrets/data/vault/apps/openobserve
vault.hashicorp.com/agent-inject-template-openobserve-basic-auth: |-
{{ "{{- with secret \"secrets/data/vault/apps/openobserve\" -}}" }}
{{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
Basic {{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
{{ "{{- end -}}" }}
mode: daemonset
fullnameOverride: otel-collector
@ -89,7 +69,7 @@ spec:
otlphttp/openobserve:
endpoint: http://openobserve-web.openobserve.svc.cluster.local:5080/api/default
headers:
Authorization: Basic ${env:OPENOBSERVE_BASIC_AUTH}
Authorization: ${file:/vault/secrets/openobserve-basic-auth}
tls:
insecure: true
service: